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Amendments to the Claims : 

The following listing of claims will replace all prior versions, and listings, of claims in 
the application: 

1. (Currently Amended) An access privilege transferring method for 
safely transferring access privileges between cli e nts clients, and between the-clients 
and s e rv e rs servers, over an object space in which at least one server for providing 
objects and at least one client fef-requiring the objects are connected to one another by 
a network network, and accoGGing access to each of the objects complying with 
privilege information held by each of the clients is allowed, comprising the steps of: 
comprising: 

(n) canning e ach of the cli e nts to hold h olding u ser information and 
secret information: information by each of a plurality of clients; 

(h) miming tho r .e rver to hold th e h olding, in a server, the user 
information and the secret information of at least a first of the plurality eaeh-of the 
clients; 

(c) causing th e cli e nt to generate generating p riyilege4nfe miation; 
information bv the at least the first of the plurality of clients; 

(d) causing tho cli e nt to apply applying a predetermined calculating 
operation to information comprising at least the privilege information and the secret 
information, thereby generating protected privilege information: bv the at least the 
first of the plurality of clients; 

(o) cauGing tho client to transmit transmitting the user information, the 
privilege information and the protected privilege information from the at least the first 
of the plurality of clients to anoth e r cli e nt; at least a second of the plurality of clients; 
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(f) nmming th e anoth e r cli e nt to transmit retransmitting, from the at 
least the second of the plurality of clients, the user information, the privilege 
information and the protected privilege information to the server, thereby making a 
request to access eaek-an object; 

(g) r.nnr . ing tho Korvor to chock to s e e checking, by the server, w hether 
the privilege information received from the at least the second of th e plurality of 
clients in Stop (f) is valid; 

(h) fi.nir . iTig tho server to apply applying a predetermined calculating 
operation to information comprising at least the privilege information and the secret 
information, thereby generating protected privilege information; by the server; 

(i) mnmng tho ncrv e r to compar e comparing the protected privilege 
information received bv the server in Stop (f) with the protected privilege-information 
generated bv the server; in Step (h); and 

(fallowing an-access to eaeh-an object in response to the coincidence 
of the received protected privilege information and the generated pr otected privilege 
information two as a result of tho comparison in Step (i). b ased on the results of the 
comparison. 

2. (Currently Amended) The access privilege transferring method according to 
claim 1, wherein the nnntlw rliont transmits at least the second of the plurality of clients 
retransmits the user information, the privilege information and the protected privilege 
information receiv e d in Step ( e ) to at least a third of the plurality of clients. a second other 
cli e nt. 

3. (Currently Amended) An access privilege transferring method for allowing 
each of the clients activated over an object space in which at least one server for providing 
objects and at least one client fef-requiring the objects are connected to one another by a 
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network and accosoing access to each of the objects complying with privilege information 
held by each of the clients is allowed, allowed to safely transfer access privileges to another 
rlipnt rnTnprir . ing tho ntepr. of: comprising: 

(a)-holding user information and secret information to be shared by at least-fee 

serveris"): one server; 

{b)-generating privilege information; and 

(e)-applying a predetermined calculating operation to information comprising 
at least the privilege information and the secret information information, t e-thereby g e n e rat e 
generating p rotected privilege information capable of being tobe_safely transferred to another 
aclient. 

4. (Currently Amended) An access privilege transferring method for allowing 
each of the servers activated over an object space in which at least one server for providing 
objects and at least one client fef-requiring the objects are connected to one another by a 
network and accoosing accessto each of the objects following b ased on p rivilege information 
held by each of the clients is allowed, allowed to safely respond to an access request issued 
from the client to which access privileges are transferred, comprising tho otopo of: 
comprising: 

(^receiving an access request including user information, privilege 
information and protected privilege information; 

(g) -checking tensee-whether the received p rivilege information received in Stop 

(£)-is valid; 

(h) -applying a predetermined calculating operation to information comprising 
at least the privilege information and the_secret information to information, thereby g e n e rat e 
generating p rotected privilege information; 
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(i)-comparing the received p rotected privilege information received in St e p (f) 
with the generated p rotected privilege information generat e d in St e p (h): information; and 

^-allowing aa-access to e ach of the objects an object in response to the 
coincidence of the twe -received protected privilege information and the generated protected 
privilege information based on the results of the comparison, as a result of th e comparison in 
Stop (i). 

5. (Currently Amended) The access privilege transferring method according to 
claim 1, wherein applying & e-a predetermined calculating operation is to apply further 
comprises applying a one-way function to a bit string obtained by concatenating operands 
with one another. 

6. (Currently Amended) An access privilege transferring method for safely 
transferring access privileges between-ebent s clients, and between the-clients and serv e rs 
servers, over an object space in which at least one server for providing objects and at least one 
client fewequiring the objects are connected to one another by a network and acc e ssing 
access to each of the objects complying with privilege information held by each of the clients 
is allowed, comprising the steps of: comprising: 

(A) causing e ach of the cli e nts to hold h olding user information and secret 
information; information by each of a plurality of clients; 

(B) causing th e s e rver to hold h olding, in a server, the user information and the 
secret information o f each of the cli e nts: at least a first of the plurality of clients; 

(C) causing the client to g e n e rat e generating p rivilege information ? 
information by the at least the first of the plurality of clients; 

(D) causing th e cli e nt to apply applying a predetermined calculating operation 
to information comprising at least the privilege information and the secret information, 
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thereby generating first protected privilege information; information by the at least the first of 
the plurality of clients; 

(E) causing th e cli e nt to transmit transmitting the user information, the 
privilege information and the first protected privilege information from the at least the first of 
the plurality of clients to anoth e r cli e nt; at least a second of the plurality of clients; 

(F) causing th e anoth e r cli e nt to r e c e iv e r eceiving, by the at least the second of 
the plurality clients, a challenge character string from the server; 

( G} causing th e anoth e r cli e nt to apply applying the a -predetermined 
calculating operation to information comprising at least the challenge character string and the 
first protected privilege information, thereby generating second protected privilege 
information; information by the at least the second of the plurality clients; 

fED causing th e anoth e r cli e nt to transmit t ransmitting the user information, the 
privilege information and the second protected privilege information from the at least the 
second of the plurality clients to the server, thereby making a request to access each of th e 
obj e cts; an object; 

(I) causing th e server to ch e ck to se e checking, by the server, w hether the 
privilege information received by the server in St e p (H) is valid; 

(J) causing the server to apply applying the a -predetermined calculating 
operation to information comprising at least the privilege information and the secret 
information, thereby generating first protected privilege informati e m information by the 
server; 

(K) causing th e s e rv e r to apply applying the a -predetermined calculating 
operation to information comprising at least the challenge character string and the generated 
first protected privilege information gen e rat e d in St e p (D, information, thereby generating 
second protected privilege information; 
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(T /) causing tho server to compar e comparing the received second protected 
privilege information received in St e p (H) w ith the generated second protected privilege 
informntinn generated in Stop CK): information; and 

(M)-allowing an-access to eaeh-the object in response to the coincidence of the 
twe -received second protected privilege information and the generated seco nd protected 
privilege information as a result b ased on the results of th e comparison in Stop (N)- 
comparison. 

7. (Currently Amended) The access privilege transferring method according to 
claim 6, wherein the nnothor client transmits at least the second of the plu r ality of clients 
retransmits the user information, the privilege information and the protected privilege 
information rnnrnv a H in Step (R) to a second other cli e nt. at least a third of t h e plurality of 
clients. 

8. (Currently Amended) An access privilege transferring method for safely 
transferring access privileges between clients and servers to which user information, privilege 
information and first protected privilege information are transferred, over an object space in 
which at least one server for providing objects and at least one client ^requiring the objects 
are connected to one another by a network and accessing accessto each of the objects 
complying with privilege information held by each of the clients is allowed, comprising th e 
stops of: comprising: 

(F) rnuning the server to transmit transmitting a challenge character string 
from the server to the-a^client that makes a request to access each of the objects; an object; 

(G) miming tho client to apply applying a predetermined calculating operation 
to information comprising at least the challenge character string and the-first protected 
privilege information, thereby generating second protected privilege information: information 
by the client: 
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(H) causing tho cli e nt to transmit retransmitting, by the client, fe e-user 
information, the privilege information and the second protected privilege information to fee-a 
server, thereby making a request to access each of th e obj e cts; an object; 

(I) causing th o serv e r to ch e ck to s ee checking, by the server, w hether the 
privilege information received by the server in St e p (H) is valid; 

(J) causing tho s e rver to apply applying the a -predetermined calculating 
operation to information comprising at least the privilege information and secret information, 
thereby generating first protected privilege information; information by the server. 

(K) causing th e s e rv e r to apply applying the a -predetermined calculating 
operation to information comprising at least the challenge character string and the first 
protected privilege information generated by the server, in St e p (J), t hereby generating second 
protected privilege informati on ? information by the server; 

(L) causing the server to compar e comparing, in the server, t he second 
protected privilege information received and checked by the serve r in St e p (H) with the 
second protected privilege information generated by the server; in St e p (TO; and 

(M) causing tho s e rv e r to allow an allowing access to e ach of th e obj e cts an 
object by the server in response to the coincidence of the twe -received second protected 
privilege information and the generated second protected privilege information based on the 
results of the comparison, as a result of the comparison in St e p (N). 

9. (Currently Amended) The access privilege transferring method according to 
claim 6, wherein applying fe e-a predetermined calculating operation is-te -further comprises 
applying appW-a one-way function to a bit string obtained by concatenating operands with 
one another. 

10. (Currently Amended) An access privilege transferring method for safely 
transferring access privileges between clients clients, and between fee-clients and s e rv e rs 
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servers, over an object space in which at least one server for providing objects and at least one 
client fef-requiring the objects are connected to one another by a network and accessing 
access to each of the objects complying with privilege information held by each of the clients 
is a11nwed J comprising the stops of: comprising: 

(n) running o . nrh of tho clients to hold h olding user information and secret 
information; by each of a plurality of clients; 

(h) nnnning tho r. e rv e r to hold th e h olding, in a server, the u ser information and 
the secret information of at least a first of the plurality e aeh-of the-clients; 

(r.) miming tho client to generat e generating p rivilege information; information 
by the at least the first of the plurality of clients; 

(H) miming thn client to encrypt encrypting the generated p rivilege information 
by using the secret information, thereby generating protected privilege information; 
information by the at least the first of the plurality of clients; 

(o) rnnning tho client to transmit transmitting, from the at least t he first of the 
plurality of clients; the user information and the protected privilege information to another 
Gjient r at least a second of the plurality of clients; 

(f) muring thn nnnrtw client to transmit r etransmitting, by the at least the 
second of the plurality of clients, the user information and the protected privilege information 
to the server, thereby making a request to access each of tho objects; an object; 

(g) r.nnr.ing tho server to d e crypt decrypting the protected privilege information 
by using the secret information corresponding to the user information, thereby generating 
privilege informati ons information by the server; 

(h) r.nnr . ing the nnrvar to chock to see checking, by the server, w hether the 
privilege information generated bv the server in Stop (g) is valid; and 
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(fallowing ae-access to eaeh-an object in accordance with the result of ch e ck 
feHhe_validit y in Step (hj.^ heck, 

11. (Canceled) 

12. (Currently Amended) An access privilege transferring method for allowing 
each of servers activated over an object space in which at least one server for providing 
objects and at least one client fet-requiring the objects are connected to one another by a 
network and accessing accessto each of the objects following privilege information held by 
each of the clients is allow e d, allowed to safely respond to an access request issued from the 
client to which access privileges are transferred^ comprising the stops of: comprising: 

(^receiving an access request including user information and protected 

privilege information; 

(g) -decrypting the protected privilege information by using secret information 
corresponding to the user information to thereby generate privilege information; 

(h) -checking whether the generated p rivilege information generated in Step (g) 

is valid; and 

(fallowing an access to each of the obj e cts an object in accordance with the 
result nf r.hnnlr for vnlidity in Stop (h U he validity check. 

1 3 . (Currently Amended) An access privilege transferring method for safely 
transferring access privileges between-etients clients, and between the-clients an d s e rv e rs 
servers, over an object space in which at least one server for providing objects and at least one 
client fe^-requiring the objects are connected to one another by a network and acc e ssing 
access to each of the objects complying with privilege information held by each of the clients 
is allowed^ comprising tho steps of: comprising: 

(A) rmir . ing anch of tho cli e nts to hold holding u ser information and secret 
information: information by each of a plurality of clients; 
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(R) nnnr,ing the newer to hold the holding, in the server, the user information 
and the secret information of at least a first of the plurality eaeh-of fee-clients; 

(C) cmining the client to g e n e rat e generating p rivilege information; 
information by the at least the first of the plurality of clients; 

(T>) fimifiing tho client to encrypt encrypting t he generated p rivilege 
information by using the secret information, thereby generating first protected privilege 
information: by the at least the first of the plurality of clients; 

(F.) rnnr . ing the client to transmit transmitting the user information, the 
privilege information and the first protected privilege information from the at least the first of 
the plurality of clients to another cli e nt; at least a second of the plurality o f clients; 

(T?) rnnr . ing th ft nnnthqr client to rec e iv e r eceiving, by the at least t h e second of 
the plurality of clients, a challenge character string from the server, 

(a) miming th e another client to encrypt encrypting the challenge character 
string by using the first protected privilege information, thereby generating second protected 
privilege information: information by the at least the second of the plurality of clients; 

(TT) miming thn nnnthor client to transmit retransmitting, by the at least the 
second of the plurality of clients, t he user information, the privilege information and the 
second protected privilege information to the server, thereby making a request to access eaeh 
an object; 

(T) miming the r .e rvor to ch e ck to s e e checking, by the server, whether the 
privilege information received bv the server in Stop (H) is valid; 

(T) rmimng tho serv e r to encrypt encrypting the privilege information by using 
the secret information, thereby generating first protected privilege information ^ information 
by the server; 
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(K) canning tho oorvor to encrypt encrypting the challenge character string by 
using the first protected privilege information generated bv the serven in St e p (J), thereby 
generating second protected privilege informatio n s information bv the server; 

(T ) miming tho serv e r to compar e comparing the received second protected 
privilege information received in St e p (H) w ith the generated second protected privilege 
information g e n e rated in Stop AO: information; and 

(M)-allowing an-access to eaeh-an object in response to the coincidence of the 
twe -received second protected privilege information and the generated second protected 
privilege information as a result of th e comparison in Stop (N). b ased on the results of the 
comparison. 

14. (Currently Amended) An access transferring method for safely transferring 
access privileges between clients and servers to which user information, privilege information 
and first protected privilege information are transferred, over an object space in which at least 
one server for providing objects and at least one client ^-requiring the objects are connected 
to one another by a network and accessing access to each of the objects complying with 
privilege information held by the client is allowed, comprising tho stops of: comprising: 

(F) miming the n e rver to transmit transmitting a challenge character string to 
thp r.lipnt that malfpsa request to access each of th e obj e cts; an object; 

(G) canning tho client to encrypt encrypting the challenge character string by 
using the first protected privilege information, thereby generating second protected privilege 
information; 

(H) canning th e cli e nt to transmit transmitting the user information, the 
privilege information and the second protected privilege information to the-ajserver, thereby 
making a request to access oach of the obj e cts: an object; 
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(T) causing tho serv e r to ch e ck to se e checking whether the received p rivilege 
information r e ceived in St e p (H) is valid; 

(I) causing tho serv e r to e ncrypt encrypting the privilege information by using 
secret information, thereby generating first protected privilege information; 

(K) causing th e s e rv e r to e ncrypt encrypting t he challenge character string by 
using the generated first protected privileg e information gen e rat e d in St e p (J), information, 
thereby generating second protected privilege information; 

(T/) causing tho server to compare comparing, in the server, the second 
protected privilege information received by the server in St e p (H) w ith the second protected 
privilege information generated by the server; in Step (TQ; and 

(M) causing tho server to allow an allowing access to e ach of th e obj e cts an 
object by the server in response to the coincidence of the two as a r e sult of th e comparison in 
Stop (N). received second protected privilege information and the generated second protected 
privilege information based on the results of the comparison. 

1 5 . (Currently Amended) An information managing method for safely managing 
secret information between clients and/or clients, and b etween the-clients and s e rv e rs servers, 
over an object space in which at least one server for providing objects and at least one client 
feF-requiring the objects are connected to one another by a network, comprising the st e ps of: 
comprising: 

causing a first client to transmit transmitting secret information from at least a 
first of a plurality of clients to at least a second-etient r of the plurality of clients; 

causing tho first client to transmit transmitting an encryption key from the at 
least the first of the plurality of clients to the at least the second cli e nt; and of the plurality of 
clients; 
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causing the second cli e nt to encrypt encrypting, by the at least the second of 
the plurality of clients, the secret information by using the encryption-key ; key: an d thoroafter 

storing the encrypted secret information , by the at least the second of the 

plurality of clients, in a secondary memory device. 

16. (Currently Amended) An information managing method for safely managing 
secret information between clients and/or clients, and b etween the-clients an d serv e rs servers, 
over an object space in which at least one server for providing objects and at least one client 
fe^requiring the objects are connected to one another by a network, comprising the st e ps of: 
comprising: 

causing a first client to encrypt th e encrypting secret information by using an 
encryption key, thereby generating protected secret information: information bv at least a first 
of a plurality of clients: 

causing the first client to transmit transmitting the protected secret information 
from the at least the first of the plurality of clients to at least a secondment s of the plurality 
of clients: 

causing th e second client to stor e storing, by the at least the second of the 
plurality of clients, the received p rotected secret information in a secondary memory device; 

causing the first cli e nt to transmit transmitting a decryption key for decrypting 
the information encrypted by the encryption key from the at least the first of the plurality of 
clients to the at least the secondment s of the plurality of clients: and 

causing tho s e cond client to d e crypt decrypting, by the at least the second of 
the plurality of clients, the protected secret information by using the decryption key, thereby 
obtaining the secret information. 

17. (Original) The information managing method according to claim 16, wherein 
the encryption key is identical to the decryption key. 
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18. (Currently Amended) An information managing method for safely managing 
secret information betwee n cli e nts and/or clients, and b etween fee-clients and servers servers, 
over an object space in which at least one server for providing objects and at least one client 
^-requiring the objects are connected to one another by a network, comprising th e st e ps of: 
comprising: 

causing a first cli e nt to transmit transmitting secret information from at least a 
first of a plurality of clients to at least a second-etien fe of a plurality of clients; 

causing the s e cond client to hold h olding, by the at least the second of the 
plurality of clients, an encryption key for encrypting information and a decryption key for 
decrypting the encrypted information encrypted by the encryption key; 

causing th e second cli e nt to transmit transmitting the decryption key from the 
at least the second of the plurality of clients to the at least the first-etkaafc of the plurality of 
clients; 

causing the s e cond cli e nt to stor e storing, by the at least the second of the 
plurality of clients, p rotected secret information obtained by encrypting the secret information 
with the encryption key in a secondary memory device; and 

causing th e second client to d e crypt decrypting the protected secret 
information by using the decryption key, thereby obtaining the secret information. 
information by the at least the second of the plurality of clients. 

1 9. (Currently Amended) An information managing method for safely managing 
secret information between cli e nts and/or clients, and b etween the-clients and s e rv e rs servers, 
over an object space in which at least one server for providing objects and at least one client 
fef-requiring the objects are connected to one another by a network, comprising th e st e ps of: 
comprising: 
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causing a first client to transmit transmitting fe s^secret information from at 
least a first of a plurality of clients to at least a second-etort r of the plurality of clients; 

causing th e second client to transmit transmitting, by the at least the second of 
the plurality of clients, a challenge character string to the at least the first-etient t of the 
plurality of clients; 

causing the first client to apply applying a predetermined calculating operation 
to the challenge character string and seeend-the secret information, thereby generating an 
encrvption4Eev r key by the at least the first of the plurality of clients; 

causing the first client to transmit transmitting the encryption key from the at 
least the first of the plurality of clients to the at least the second-eMen fe of the plurality of 
clients; and 

causing th e second client to store storing, by the at least the second of the 
plurality of clients, p rotected secret information obtained by encrypting the secret information 
by using the encryption key in a secondary memory device. 
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